Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/70C5FD009D2811F0AD29AE30C4F9AE02.roa
File:                     70C5FD009D2811F0AD29AE30C4F9AE02.roa (raw, json)
Hash identifier:          Yftfc+u71TCMES2kV8swx0hntlbq1/GKU0MqNStA090=
Subject key identifier:   99:3F:84:72:99:B4:40:85:04:F2:42:B4:10:DD:BD:C6:E9:29:DF:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31F9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/70C5FD009D2811F0AD29AE30C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:27:01 +0000
ROA not before:           Mon 06 Jul 2026 16:27:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154060
IP address blocks:        165.101.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12793 (0x31f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:27:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd755-0338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:35:ff:d8:a4:49:6c:99:93:2a:cd:61:3b:
                    5f:c6:a3:fe:07:e9:aa:14:4b:a0:af:13:6b:6b:a3:
                    f3:2e:8f:3c:5d:24:06:2a:76:6b:bd:72:41:9d:25:
                    32:a5:42:f5:fb:77:07:9c:b3:ca:5c:ba:26:8f:31:
                    93:a0:c9:7c:2e:0e:8e:44:ae:b3:4d:73:cc:13:74:
                    d6:dc:5e:17:77:e4:69:de:57:3a:69:f9:19:06:89:
                    ba:52:b8:02:46:5b:ec:c8:fa:48:5d:c2:ea:05:ef:
                    bf:ee:b3:90:cd:d4:d4:cb:cf:de:67:cd:02:e0:59:
                    05:63:7a:25:7a:d5:5d:68:d4:0c:ec:36:19:d7:f8:
                    79:a3:a3:e0:1b:22:ac:9a:14:b3:00:68:9f:25:4c:
                    b4:59:41:97:78:98:f4:39:f7:bf:92:4b:a1:49:ef:
                    31:29:ce:a9:5a:48:48:2c:2d:75:3e:4d:c0:38:dd:
                    e8:59:5c:4e:44:bc:15:e7:80:20:30:f7:f5:76:73:
                    c2:76:6a:05:3e:7c:af:19:e7:99:29:eb:dc:13:c8:
                    be:0b:55:cc:96:16:6b:c6:43:fe:77:eb:30:f3:94:
                    f2:4d:3b:95:fe:6f:fb:91:c8:a7:1d:6a:30:b2:49:
                    05:9d:9c:f0:7a:99:f0:a5:ad:7b:13:79:e4:52:b3:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:84:72:99:B4:40:85:04:F2:42:B4:10:DD:BD:C6:E9:29:DF:C8
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/70C5FD009D2811F0AD29AE30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:45:67:89:70:8a:8c:d8:b0:9e:9a:a1:f3:b9:2f:15:df:
         f6:f7:5d:7f:8e:2b:4a:cc:82:3a:72:fa:e3:c4:c6:da:4c:5d:
         92:10:f2:d2:60:de:3a:ea:75:22:38:15:01:f5:ea:f2:ae:97:
         06:ba:f0:b7:77:ad:18:de:33:d6:13:81:3d:6b:0d:26:15:4f:
         a0:0f:08:e3:19:40:be:1f:b0:2c:2f:89:cf:e9:0a:b0:2d:cd:
         b3:85:2f:62:d0:7c:56:3f:1c:11:7b:b2:8b:1e:01:76:65:1a:
         2a:bc:0c:0e:60:8a:79:ff:c7:db:c8:e6:a8:2f:d0:5f:3f:5b:
         6c:6d:47:c4:70:5a:53:3e:bb:e9:f3:03:3a:96:fb:95:5a:71:
         4c:3f:f7:36:bc:e4:d0:00:1c:75:70:2d:e6:50:2a:45:4f:0a:
         46:6c:9b:26:5d:c1:fd:b8:65:2d:35:b8:73:03:02:d2:66:47:
         c3:e9:18:f0:47:07:13:dc:3d:a2:e8:a0:62:e8:81:51:d6:a4:
         7d:03:f7:a6:36:40:4c:99:2e:0f:51:87:c7:89:1a:39:b0:27:
         da:66:5b:c9:a3:e9:73:2b:bf:c9:d2:2e:31:10:02:f9:c2:6a:
         1d:a4:80:27:ee:a0:f8:07:40:0a:d8:af:67:e0:d8:10:ed:24:
         40:c8:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:07 2026 by rpki-client